Worrying respons to Verify Integrity

Random stuff about serendipity. Discussion, Questions, Paraphernalia.
Post Reply
accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Worrying respons to Verify Integrity

Post by accampbell » Fri Feb 04, 2011 11:35 am

Some time ago I made the alterations suggested in the blog on this site (December 21), deleting the files suggested there.

Following another post in this forum I just did verification on my site and got the following:

* include/functions_config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/HtmlTidy/html-tidy-logic.php corrupt or modified: failed verification
* htmlarea/plugins/InsertSnippet/snippets.php corrupt or modified: failed verification
* htmlarea/plugins/ImageManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/ExtendedFileManager/config.inc.php corrupt or modified: failed verification
* htmlarea/plugins/SuperClean/tidy.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/aspell_setup.php corrupt or modified: failed verification
* htmlarea/plugins/SpellChecker/spell-check-logic.php corrupt or modified: failed verification
* htmlarea/plugins/FormOperations/formmail.php corrupt or modified: failed verification
* htmlarea/contrib/php-xinha.php corrupt or modified: failed verification

Question: is it enough simply to upload the latest version of Serendipity or should I first delete all this stuff manually?
Anthony Campbell

User avatar
garvinhicking
Core Developer
Posts: 30020
Joined: Tue Sep 16, 2003 9:45 pm
Location: Cologne, Germany
Contact:

Re: Worrying respons to Verify Integrity

Post by garvinhicking » Fri Feb 04, 2011 11:54 am

Hi!

When you deleted the files, that's okay. The official s9y release still has those file (hey, actually some people use the functionality provided by that WYSIWYG component). If you don't use those, it's safer to keep the files removed.

Regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/

User avatar
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu » Fri Feb 04, 2011 12:01 pm

Hi Anthony

This is curious with the functions_config.inc.php.... wonder what happend there.

Erasing the htmlarea folder first is a good idea, but you have to check other writable places
(like /uploads, /templates_c, /archives, serendipity_config_local.inc.php (, .htaccess) and the database) too.

If this is done and you beginn to upload the 1.5.5 make sure the functions_config.inc.php gets overridden with the 1.5.5 version.

Ian

accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell » Fri Feb 04, 2011 2:40 pm

Sorry - I'm still not clear what I should do. Ignore the error messages? Delete all the files that Verify objects to? Delete everything and start again?
Anthony Campbell

User avatar
onli
Regular
Posts: 2371
Joined: Tue Sep 09, 2008 10:04 pm
Contact:

Re: Worrying respons to Verify Integrity

Post by onli » Fri Feb 04, 2011 2:45 pm

You deleted the files, the verification had to fail. You can simply ignore the message.

The verification of functions_config.inc.php is another story, guess you changed that file? Have a look in it if not.

User avatar
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu » Fri Feb 04, 2011 2:48 pm

it says:

If you dont need htmlarea functionality erase this folder and dont copy the new one (Garvin).
and I said: check for things that dont belong to you in the mentioned folders, files and places
and then just do the upgrade.

Ian

accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell » Fri Feb 04, 2011 3:18 pm

Thanks for the clarification. I removed the htmlarea folder without ill-effects.

I'm not sure about functions_config.inc.php. It was changed in August and I think I may have done so in the course of sorting out a password problem with Gavin's help. I can't be sure. Perhaps I should upload a new version just of that file?
Anthony Campbell

User avatar
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu » Fri Feb 04, 2011 3:31 pm

this depend on the serendipity version you are running.
To be save I would do a full upgrade.

Ian

accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell » Fri Feb 04, 2011 3:38 pm

I downloaded the file and compared it (with vimdiff) with the file from the latest version of Serendipity. The two are completely identical so perhaps I should simply leave things as they are.
Anthony Campbell

User avatar
Timbalu
Regular
Posts: 4598
Joined: Sun May 02, 2004 3:04 pm

Re: Worrying respons to Verify Integrity

Post by Timbalu » Fri Feb 04, 2011 3:49 pm

this may very well be, but you are running S9y 1.5.3., as I can see.
With 1.5.4 there were some bugfixes and minor improvements and
lastly 1.5.5 fixed the vulnerable htmlarea thing you were concerned about.

Updating is very easy and it doesn't cost the world. ;-)

Ian

accampbell
Regular
Posts: 138
Joined: Fri Jun 09, 2006 8:59 pm
Location: London, UK
Contact:

Re: Worrying respons to Verify Integrity

Post by accampbell » Fri Feb 04, 2011 4:47 pm

Point taken. I'll do that tomorrow.
Anthony Campbell

Post Reply